Privacy Policy
1. Who is responsible for your personal data
The data controller responsible for the processing described in this policy is: Rosa Feola Email: info@rosafeola.com You can use this email address for questions about this policy or to exercise your data protection rights.2. Personal data we process and why
Website operation and security
When you visit the website, technical information may be processed by the systems that deliver and protect it. This includes your IP address, browser and device information, requested pages, access times and technical or security logs. This information is used to deliver website content, diagnose errors, maintain service availability and prevent unauthorised access or misuse. The legal basis is our legitimate interest in operating a reliable and secure website, under Article 6(1)(f) GDPR.Enquiries and correspondence
When you contact us, we process your name, email address and the information you include in your message to respond to your enquiry and manage any related correspondence. The legal basis is our legitimate interest in responding to communications addressed to us, under Article 6(1)(f) GDPR. Where an enquiry concerns steps you request before entering into a contract, Article 6(1)(b) GDPR applies instead. Providing this information is voluntary, but we may be unable to respond without the contact details or information needed to handle your request. Please do not send sensitive personal information that is unnecessary for your enquiry.Newsletter
When you subscribe to Rosa Feola’s newsletter, we process your name, surname and email address, together with information necessary to record and manage your subscription and consent. The website form may also process technical information associated with the submission, such as the date and time of submission, page URL, IP address and browser information.
The newsletter is intended to provide updates about Rosa Feola’s upcoming performances, recordings and other news relating to her artistic activities.
The legal basis for this processing is your consent under Article 6(1)(a) GDPR. Subscribing is voluntary and you may browse the website without subscribing.
Newsletter subscriptions are currently collected through a form on this website and stored within the website’s WordPress database, hosted by Server Plan S.r.l. The form may also generate email notifications and confirmation messages through the website’s email infrastructure.
At present, no external email marketing platform is used for newsletter distribution. If such a service is introduced in the future, this privacy policy will be updated as appropriate before subscriber data is transferred to that provider.
You can withdraw your consent at any time by using the unsubscribe option provided in newsletter communications or by writing to info@rosafeola.com. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
3. Cookies and CookieYes
Cookies are small files stored on your device when you visit a website. Similar technologies may also be used to remember preferences or enable particular website features. This website uses CookieYes to manage cookie preferences. This involves recording your choices and using the technical information needed to remember and apply them. Strictly necessary cookies support functions such as website security and remembering your consent preferences. These cookies do not require consent. Where their use involves personal data, the relevant legal basis is our legitimate interest in providing the requested website functionality or compliance with applicable consent-management obligations. Cookies and other tracking technologies that require consent are used only after you have given that consent. The legal basis for the associated processing of personal data is Article 6(1)(a) GDPR. You can accept, reject or customise optional cookies through the CookieYes consent interface. You can subsequently change your choices or withdraw consent using the cookie settings control below. The cookie details available through the consent interface identify the cookies in use, their providers, purposes and durations. Refusing optional cookies does not prevent access to the website’s basic content, although features that depend on those cookies may remain unavailable. You can also manage or delete cookies through your browser settings. Deleting the cookie that stores your preferences may cause the website to ask for your choices again. For information about CookieYes, please see the CookieYes privacy policy.4. External content and links
Some pages may contain content or media supplied by third-party services, such as video or audio players. Where such third-party content is used, the relevant provider may receive technical information such as your IP address and browser information when the content is loaded.
Where consent is required for third-party content, cookies or similar technologies, the content is subject to the preferences expressed through the CookieYes consent management system.
The website also contains links to external websites, including theatres, ticketing services, record labels, artist-management agencies and media publications. When you follow an external link, the privacy policy of the relevant third-party website applies to its processing of your personal data.
5. Who may receive your personal data
Personal data may be processed by authorised persons involved in the management of this website and, where necessary, by service providers acting on behalf of the data controller.
The website, email services and related technical infrastructure are currently hosted by Server Plan S.r.l., Italy, which may process personal data as a data processor where necessary to provide hosting, email, backup, security and technical services.
Personal data may also be processed by providers used for website maintenance, security and consent management, including CookieYes, to the extent necessary to provide their respective services.
Data may also be disclosed where required by law, by a competent authority, or where necessary to establish, exercise or defend legal claims.
6. International data transfers
The website and email infrastructure are currently provided by Server Plan S.r.l., an Italian service provider.
Cookie consent management is provided by CookieYes Limited, based in the United Kingdom. The European Commission currently recognises the United Kingdom as providing an adequate level of protection for personal data under Article 45 GDPR.
CookieYes may use sub-processors in connection with the provision of its services. Where personal data is transferred to a country outside the European Economic Area that is not covered by an adequacy decision, CookieYes states that appropriate safeguards are used, including the European Commission’s Standard Contractual Clauses where applicable.
Further information about applicable safeguards can be requested by writing to info@rosafeola.com.
7. How long we retain personal data
Newsletter: subscription data is retained while you remain subscribed and the newsletter service remains active. When you unsubscribe, your details are removed from the active mailing list. Limited information may be retained where necessary to record your withdrawal and prevent further unwanted communications.
Evidence of consent: information necessary to demonstrate that consent was obtained or withdrawn may be retained for as long as reasonably necessary to demonstrate compliance with applicable data protection obligations or to establish, exercise or defend legal claims.
Enquiries and correspondence: information is retained for the time necessary to respond to and manage the relevant enquiry and any subsequent correspondence, and thereafter only where continued retention is required by law or necessary for the establishment, exercise or defence of legal claims.
Technical logs and backups: technical information is retained only for the periods reasonably necessary for website operation, security, troubleshooting, backup management and compliance with applicable obligations, according to the technical settings and retention procedures of the relevant service providers.
Cookies and consent records: individual cookie expiry periods are shown through the CookieYes consent interface. CookieYes also maintains consent records for the purpose of documenting visitors’ cookie choices.
Personal data will not be retained for longer than necessary for the purposes for which it was collected, subject to any applicable legal or regulatory retention requirements.